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-DETAILED ACTION 
Status of the Application 

1. This action is in response to tine Arguments/Remarl^s filed April 23, 2009. 
Claims 1-22 are pending and have been examined. 

Claim Rejections - 35 USC § 101 

2. Claims 13-20 are rejected under 35 U.S.C. §101 because the claimed invention 
is directed to non-statutory subject matter. Based on Supreme Court precedent^ and 
recent Federal Circuit decisions, a §101 patent eligible process must (1 ) be tied to a 
particular machine (or apparatus), or (2) transform a particular article to a different state 
or thing. See In re Bilski, 545 F.3d 943, 88 USPQ2d 1385 (Fed. Cir. 2008)(en banc). 
This is the Machine-or-Transformation Test ("M-T Test"). 

To meet prong (1), the method step should positively recite machine to which it 
is tied. Alternatively or to meet prong (2), the method step should positively recite the 
material that is being changed to a different state or positively recite the subject matter 
that is being transformed. For example, a method claim that would not qualify as a 
patent eligible process because it fails both prongs of the M-T Test would be a claim 
that recites purely mental steps. 

In this particular case, the process claims fail prong (1 ) because the methods 
steps of receiving, generating, comparing, enabling are not tied to a specific machine 
since the methods steps could be performed by a human being, since they could be 
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manual steps. Finally, the Examiner notes that the claims fail prong (2) because the 
method steps do not transform the underlying subject matter to a different state or thing. 

Claim Rejections - 35 USC §112 

3. The following is a quotation of the second paragraph of 35 U.S.C. 1 12: 

The specification shall conclude with one or more claims particularly 
pointing out and distinctly claiming the subject matter which the applicant 
regards as his invention. 

4. Claims 4, 6, 14, 15 are rejected under 35 U.S.C. 112, second paragraph, as 
being indefinite for failing to particularly point out and distinctly claim the subject matter 
which applicant regards as the invention. Claims 4 and 14 recite the terms 
"arithmetically combines" and "arithmetically combining" in claims 4 and 14 are relative 
terms which renders the claim indefinite. Both terms are not defined by the claims, the 
specification does not provide a standard for ascertaining the requisite degree, and one 
of ordinary skill in the art would not be reasonably apprised of the scope of the 
invention. Generation of the security key is rendered indefinite by the use of the above 
terms. Claims 6 and 15 recite the terms "augments" and "augmenting" are relative 
terms which render the claim indefinite. Both terms are not defined by the claims, the 
specification does not provide a standard for ascertaining the requisite degree, and one 
of ordinary skill in the art would not be reasonably apprised of the scope of the 



^ See also Diamond v. Diehr, 450 U.S. 175, 184 (1981); Parker v. Flook, 437 U.S. 584, 588 n.9 
(1978); Gottschalkv. Benson, 409 U.S. 63, 70 (1972); Cochrane v. Deener, 94 U.S. 780, 787-88 
(1876). 
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invention. Generation of the security key is rendered indefinite by the use of the above 
terms. 

Claim Rejections - 35 USC § 103 

5. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

6. Claims 1 , 2-7, 1 3-1 5, 20-22 are rejected under U.S.C. 1 03(a) as being 
unpatentable over Germer, US Patent No. 7,065,457 in view of Matyas et al, US Patent 
No. 4,918,728 in view of Haines, US Patent No. 5,107,455, and in further view of Kinter- 
Meyer, Utility/Energy Management and Control System Communication Protocol 
Requirements (Kinter-Meyer). 

As per claims 1,13, 20-22: 

With regard to the limitation of enabling a data access without reference to the 

data table parameters..., Germer discloses: (col. 12, lines 38-50, data access, col. 2, 
lines 25-41, ANSI CI 2.1 9 standard tables) 

Germer discloses the limitations above but does not disclose a bypass 
component but Matyas does. "Protection From Non-System Generated Keys. The 
method for coupling the control vector and key is such that CV checking is unable to 
detect a system generated key (via KGEN or GKS) from a non-system generated key. 
For this reason, a "back-door" method exists within the architecture for generating a 
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keys and control vectors. It consists of defining a control vector "of choice" and a 
random number which is then represented as a key encrypted in the manner described 
under the architecture using the selected control vector. The so-called "back-door" 
method of key generation is primarily an annoyance, although in some cases 
cryptographic attacks would be possible if additional measures of defense were not 
taken in the architecture" (Matyas, column 15, lines 18-27 and 31-34, unable to detect a 
system generated key (via KGEN or GKS) from a non-system generated key, back-door 
method). 

The Deacde4 table parameters are the security limiting tables, which are part of 
the ANSI CI 2.1 9 standard where access permissions are used to limit table read or 
write access, although the exact means for granting access are not defined by the 
standard. The present invention involves a back-door or bypass method that goes 
around the ANSI CI 2.1 9 security features. Back-door or bypass security methods are 
well known in the art as exemplified by Maytas, which in this case, control vector 
checking is unable to detect a system generated key from a non-system generated key, 
much like what is being done in the current application. 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Germer with the bypass of security features of Maytas since this 
allows for meter calibration and upgrade that would otherwise be denied access due to 
a data table read only restriction, incorporated by the ANSI CI 2.1 9 standard. 
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With regard to the limitation of security tables, Germer discloses ANSI CI 2.1 9 
standard tables, which incorporates the ANSI C12.19 security tables but does not 
specifically disclose them, but Kinter-Meyer does (page 92) 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Germer with the security tables of Kinter-Meyer in order to restrict 
data access operations. 

Germer/Matyas disclose the limitations as shown above but do not disclose a 
security component, but Haines does: 

a security component for determining whether an externally generated access 
key is the same as an internally generated access key (Haines, column 1, lines 67-68 
and 2 lines 1-24, data center checks code, enable codes agree) 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Germer/Matyas with the security component of Haines in order to 
authenticate data access operations. 

As per claims 13, 22: 

Germer/Matyas disclose the limitations as shown above but do not disclose the 
following, but Haines does: receiving a request for a security key (Haines, column 1, 
lines 67-68 and 2 lines 1-24, I/O configuration request, data center) 

Haines teaches: "The meter is reconfigured by first putting the meter into a I/O 
configuration mode by suitable entries from the keyboard. In this mode, the meter is 
inhibited from printing postage. The meter has a storage register for a current or old I/O 



Application/Control Number: 10/729,852 Page 7 

Art Unit: 3621 

configuration number (lOCN). A desired new lOCN is entered via l<eyboard entry. Tlie 
meter software generates an encrypted I/O configuration request code that is partially 
based on the value of the new lOCN. The I/O configuration request code is 
communicated to a data center computer along with other validating identification 
information. The data center computer checks the code by computing the I/O 
configuration request code using the same algorithm. If the two values agree, the data 
center computer generates an encrypted I/O configuration enable code that is partially 
based on the meter serial number. This is communicated to the meter, which receives 
the computer generated I/O configuration enable code and also generates an internal 
I/O configuration enable code using the same encryption algorithm as the data center 
computer. If the I/O configuration enable codes agree, the meter overwrites the old 
lOCN with the new lOCN in permanent storage. The external devices in communication 
with the meter may then read the lOCN and implement the feature set represented by 
the lOCN." (Haines, column 1, lines 67-68 and 2 lines 1-24). It would have been 
obvious to one of ordinary skill in the art at the time of the invention to modify 
Germer/Maytas with the internally generated code of Haines to enhance security to 
prevent unauthorized data access operations. 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Germer/Matyas with the security key request of Haines since this 
requires user authentication prior to meter calibration and upgrade that would otherwise 
be denied access due to a data table read only restriction, incorporated by the ANSI 
012.19 standard. 
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Germer/Matyas disclose the limitations as shown above but do not disclose the 
following, but Haines does: 

generating a security key, Haines teaches, (column 1, lines 67-68, column 2, 
lines 1-23, I/O configuration request code), 

generating an access key from the security key, wherein the generated access 
key is generated within the utility meter (column 1 , lines 67-68, column 2, lines 1 -23, I/O 
configuration request code, internal I/O configuration enable code); 

an access key generator configured to receive the security key and generate an 
internal access key (Haines, column 1 , lines 67-68 and 2 lines 1-24) 

comparing the generated access key to an externally generated access key. . . 
(Haines, column 1, lines 67-68 and 2 lines 1-24, data center checks code, enable codes 
agree) 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Germer/Matyas with the sercurity key and access key generation 
and comparison Haines in order to prevent unauthorized meter access. 

As per claims 2-6, 14, 15: 

With regard to the limitations of, Germer/Matyas does not explicitly teach a security key 
generator, variable data, or augmenting an access key, but Haines does: 
a security key generator for generating a security key (column 1, lines 67-68, 
column 2, lines 1-23, I/O configuration request code ). 
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the security key generator generates the security l<ey from variable data and data 
associated with the meter, Haines teaches (column 1, lines 67-68, column 2, lines 1-23, 
I/O configuration request code, column 3, lines 55-68 , col. 4, lines 1-9, meter serial 
number, CTID incremented (variable)) 

the security f<ey generator arithmetically combines the variable data and the data 
associated with the meter to generate the security key, Haines explicitly teaches: 
(column 1, lines 67-68, column 2, lines 1-23, I/O configuration request code, column 3, 
lines 55-68 , col. 4, lines 1-9, meter serial number, CTID incremented (variable), input 
numbers use to generate encrypted codes) 

an access key generator for generating an access key from the security key, 
Haines explicitly teaches: meter (column 1, lines 67-68, column 2, lines 1-23, I/O 
configuration request code, internal I/O configuration enable code);. 

the access key generator augments the security key before generating the 
access key, Haines explicitly teaches: (column 7, lines 58-68, column 8, lines 1-6, HSL 
value) 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Germer/Matyas with the security key generator, variable data, and 
augmenting an access key of Haines in order to further secure key generation from 
allowing fraudulent access. 
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As per claim 7: 

With regard to the limitations of an access key comparator for comparing the 
access key generated by the access key generator to an access key received from an 
external device, Germer/Matyas does not explicitly teach this but Haines does (column 
1 , lines 67-68 and 2 lines 1-24, data center checks code, enable codes agree) 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Germer/Matyasr with the access comparator of Haines in order to 
further secure key generation from allowing fraudulent access. 

As per claim 21: 

With regard to the limitation of the standard meter industry data structures are 
ANSI C 12.19 data stmctures, Germer discloses ANSI C 12.19 standard tables (col. 2, 
lines 25-41 . 

With regard to the limitation of the security data table parameters are Decade4 
table parameters. Germer does not specifically disclose the above but Kinter-Meyer 
does (see pages 92, 162). 

It would have been obvious to one of ordinary skill in the art at the time of the invention 
to modify Germer/Matyas/Haines with the ANSI C 12.19 security tables of Kinter-Meyer 
since the ANSI C 12.19 standard includes restricted access to read-only tables through 
the use of the security tables. 
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7. Claims 8-12, 16-19 are rejected under U.S.C. 103(a) as being unpatentable over 
Germer, US Patent No. 7,065,457 in viewof Matyas et al, US Patent No. 4,918,728 in 
view of Haines, US Patent No. 5,107,455, in further view of Kinter-Meyer, Utility/Energy 
Management and Control System Communication Protocol Requirements (Kinter- 
Meyer) and in further view of Hoffman et al, US Patent No. 5, 715, 390. 

As per claims 8-12, 16, 17: 

Germer/Matyas/Haines/Kinter does not explicitly teach an access monitor, unlock 
timer, single data access, and procedures, but Hoffman does: 

a data access monitor for monitoring data access operations performed by the 
external device and resetting the access key comparator in response to a data access 
being performed by the external device. Hoffman explicitly teaches: "In accordance with 
the present invention, ROM includes codes for implementing one or more stored options 
or upgrades. It will be appreciated that these options or upgrades are stored in the 
meter at the factory and can be utilized only when purchased and enabled as described 
herein. Each meter has a unique serial number stored in RAM. In the present example, 
the serial number is 16 bytes long and includes bit-flags (i.e., an option byte) indicating 
which options have already been enabled. Each option which is not enabled must be 
requested and a password verified before it can be utilized. It is an important feature of 
the present invention that the password be based on the serial number, so that the 
same password cannot simply be recorded and played back to another meter. Further, 
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the password cannot be used to upgrade more than the option(s) selected (and 
purchased) " (Hoffman, column 2 lines 16-29). 

"The upgrade command initiates the ROM codes for implementing one or more 
stored options or upgrades in step 81 . The upgrade command identifying the desired 
option or upgrade is programmed into the upgrade software program." (Hoffman, 
column 4, lines 61-65). 

"After 330 cycles, the contents of bytes B30, B31 , B32, and 833 are defined to 
be the password corresponding to the specific key, meter serial number, and option. 
The authentication algorithm being known will not in of itself allow recovery of the secret 
key. Further, if a single bit is changed in the serial number, the option byte, or the key, 
then the authentication password will change in a difficult to predict fashion" (Hoffman, 
column 5, lines 46-54). 

"It will be appreciated that the change in the option status has resulted in a 
significant change in the password. This is also the case for a small change in the serial 
number or the key" (Hoffman, column 6, lines 3-6). 

It is clear from the references above that the upgrade command and the counter 
function as a data access monitor since each option which is not enabled must be 
requested and a password verified before it can be utilized. The authentication 
algorithm referenced above functions as the reset mechanism since it prevents further 
upgrades through a significant change in the password should any small change occur 
in the option status, key, or serial number of the meter. A change in this externally 
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generated password would not match the meter's internally generated password 
preventing further data access to the meter, functioning as reset of the access key 
comparator of the current invention. 

With regard to the limitations of a unlock timer for timing an interval 
corresponding to a data access operation and for resetting tiie access l<ey comparator 
in response to a data access being performed by tlie external device. Hoffman explicitly 
teaches: "The counter is decremented each time an upgrade is downloaded to a meter, 
so that only the number of upgrades purchased can be enabled" (Hoffman, column 4, 
lines 65-67). 

The counter above functions as an unlock timer providing limited data access for 
a period based on the number of upgrades purchased that can be enabled. As 
mentioned above, the authentication algorithm functions as the reset mechanism since 
it prevents further upgrades through a significant change in the password should any 
small change occur in the option status, key, or serial number of the meter. 

With regard to the limitations of the bypass component enables a single data 
access operation by the external device. Hoffman explicitly teaches: "The upgrade 
command identifying the desired option or upgrade is programmed into the upgrade 
software program" (Hoffman, column 2, line 62-64). 

"The password is generated by processing a software key and a serial number of 
the meter with an authentication program by a processor external to the meter" 
(Hoffman, column 4, lines 47-50). 
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The upgrade software program above sends a command identifying tlie desired 
option, which enables a data access operation for upgrading the meter through an 
external device (Hoffman, column 2, lines 62-64). 

"The counter is decremented each time an upgrade is downloaded to a meter, so 
that only the number of upgrades purchased can be enabled" (Hoffman, column 4, lines 
65-67). 

It should be clear from the above references, that the counter above functions as 
an unlock timer providing limited data access for a period based on the number of 
upgrades purchased that can be enabled and that upgrading is done through an 
external device. 

With regard to the limitations of the security component and bypass component are 
implemented by a procedure. Hoffman explicitly teaches: "The upgrade command 
identifying the desired option or upgrade is programmed into the upgrade software 
program" (Hoffman, column 4, line 63-65). 

o The security component and the upgrade software program are equivalent 
per Claim 2's rejection and it is well known in the art that software programs 
contain and are developed through the use of procedures, 
o The bypass component and the upgrade software program are equivalent per 
Claim 1's rejection and it is well known in the art that software programs 
contain and are developed through the use of procedures. 
With regard to the limitations of the procedure is a computer program executed 
by a processor in the utility meter. Hoffman explicitly teaches: "The password along 
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with an upgrade command are presented to tlie meter where they are compared to the 
read-protected passwords in the RAM of the meter, and. If there is a match, then the 
upgrade command initiates the ROM codes for implementing one or more stored 
options or upgrades (Hoffman, column 4, lines 57-63). 

The comparison of passwords is obviously done, to someone skilled in the art, by 
the meter's internal processor and the processor also responds thereafter to the 
upgrade command. 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Germer/Matyas/Haines/Kinter with the access monitor, unlock timer, 
single data access, and procedures of Hoffman in order to further secure data access 
from fraudulent procedures. 

As per claims 18, 19: 

Germer/Matyas/Haines/Kinter does not explicitly teach the following limitations, 
but Hoffman does: 

generating the access key with an encryption function, 

Hoffman explicitly teaches: "After 330 cycles, the contents of bytes B30, B31 , 

B32, and B33 are defined to be the password corresponding to the specific key, meter 
serial number, and option. The authentication algorithm being known will not in of itself 
allow recovery of the secret key. Further, if a single bit is changed in the serial number, 
the option byte, or the key, then the authentication password will change in a difficult to 
predict fashion" (Hoffman, column 5, lines 47-54). 
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The authentication algorithm being known does not in and of itself allow recovery 
of the secret key, is indicative of and the result of, to on skilled in the art, to an 
encryption function. 

generating the access key with a hashing function. 

Hoffman explicitly teaches: It will be appreciated that the change in the option 

status has resulted in a significant change in the password. This is also the case for a 
small change in the serial number or the key." (Hoffman, column 6, lines 3-6). 

This result is indicative of and the result of, to one skilled in the art, to a hashing 
function, where the fundamental property of all hash functions is that if two hashes, 
according to the same function, are different, then the two inputs are different in some 
way. 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to modify Germer/Matyas/Haines/Kinter with the encryption and hashing 
functions of Hoffman in order to further secure data access from fraudulent procedures. 

Response to Arguments 

8. Applicant's arguments filed April 23, 2009 have been fully considered but they 
are not persuasive. Applicant's arguments will be addressed in sequential order as they 
were set forth in the "Remarks" section on the above date. Applicant argues that the 
101 rejection be withdrawn, which has been maintained since in this particular case, the 
process claims fail prong (1) because the methods steps of receiving, generating. 
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comparing, enabling are not tied to a specific macliine since tine methods steps could 
be performed by a human being, since they could be manual steps. Applicants 
argument regarding claims 2 and 14 involving the terms "arithmetically combines" and 
"arithmetically combining" is not supported by the specification, such as addition, 
subtraction, which has been maintained as well as the rejection regarding claims 6 and 
15 regarding "augments" and "augmenting" since these are indefinite since the they give 
no clear direction on what needs to found for a reference. Applicant argues that no 
cited reference discloses a utility meter including security data tables. At least three 
references include this feature, Germer, Edge and KinterOMeyer. Germer discloses 
ANSI CI 2.1 9 standard tables, which incorporate the ANSI 012.19 security tables as 
shown by Kinter-Meyer. Germer discloses a meter upgrade using an installed soft 
switch and tables and routines, "To upgrade a meter, an operator selects a soft switch 
(bypass component) to be installed. The soft switch is then enabled in the meter and 
the particular tables and routines associated with the function for that switch are utilized 
during meter operations, col. 20, lines 30-33. Edge, Patent No. 5,542512, incorporated 
herein by reference as shown in Germer discloses the details of a meter upgrade, col. 
2, lines 64-67, password match, col. 3. lines 1-30, software encryption key, col. 7, lines 
46-58, upgrade, hardware key, col. 8, lines 56-67, col. 9, lines 1-32, fig. 5, upgrade, 
password match. The bypass component is shown by at least Matyas and Edge, 
Haines discloses the internally generated access key. Further arguments are moot in 
light of the above mentioned Edge Patent No. 5,542512. 
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Conclusion 

9. THIS ACTION IS MADE FINAL. Applicant is reminded of tlie extension of time 
policy as set forth in 37 CFR 1 .136(a). 

1 0. A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

1 1 . Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Thomas West whose telephone number is 571-270- 
1236. The examiner can normally be reached on Tuesday and Wednesday 7:30am - 
5pm EST. 

1 2. If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Andrew Fischer can be reached on 571-272-6779. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

1 3. Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
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For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 

you have questions on access to the Private PAIR system, contact the Electronic 

Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 

USPTO Customer Service Representative or access to the automated information 

system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

Thomas West 
Patent Examiner 
Art Unit 3621 

/ANDREW J. FISCHER/ 

Supervisory Patent Examiner, Art Unit 3621 



